Behavioral task
behavioral1
Sample
b819717cb142c33e36e9f869731386d4.exe
Resource
win7-20240221-en
General
-
Target
b819717cb142c33e36e9f869731386d4
-
Size
394KB
-
MD5
b819717cb142c33e36e9f869731386d4
-
SHA1
802dcfddc5c2a1e722efe5ef62318a6173cb2b3a
-
SHA256
dc9b60ce7efd1386c064b033ee38f18a488e2e79d5fa676fc8a161b4eced2237
-
SHA512
b09bbe234b17bfd16ec9bc966948ae18fe25363fd9083ff52d7e0a6a69a38d0b6c6068351410f65b6c7c48f34bbdd53ced685bb28e441e6ad07547883eb4535b
-
SSDEEP
6144:WuHIU3SCXOM31Gs48xmj0sFNJL+pkNiCUSFVMOzd0qyN:BoUi831MjnpNMCUuM/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b819717cb142c33e36e9f869731386d4
Files
-
b819717cb142c33e36e9f869731386d4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YUPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE